Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8deba3e-d48c-36ca-9131-dec347bdbc9a.roa
File: c8deba3e-d48c-36ca-9131-dec347bdbc9a.roa (raw, json)
Hash identifier: fH0CsRUInObFjs6ghuAHKkWX5ddfxVnswLi6HcoeKnQ=
Subject key identifier: AE:8A:2B:4C:2F:5A:B6:EB:F0:3E:FC:B9:96:AA:BB:20:37:01:31:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD301C77229E37DC1095F5D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8deba3e-d48c-36ca-9131-dec347bdbc9a.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.204.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:01:c7:72:29:e3:7d:c1:09:5f:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=867e5f93-c8d5-445e-9154-0655f8cdf48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:dc:2b:3a:f9:07:17:2a:6f:53:ce:00:c0:
97:c8:ff:de:41:bc:12:8e:6e:7d:b8:43:74:e5:74:
e6:f8:6b:80:54:2b:be:f7:45:41:27:03:b2:0f:d5:
47:c3:b7:3e:e6:32:aa:61:f7:2d:ad:90:69:ad:2f:
b5:11:d8:ef:e6:ec:c5:e8:f1:c1:53:94:20:01:da:
dc:ad:b0:c1:ac:0c:90:bf:7e:5f:d9:45:76:eb:67:
fd:88:cd:7d:c0:03:8f:d0:f5:ab:8c:e6:e3:bd:e5:
cb:53:e8:bd:2f:92:23:9f:47:95:26:44:e5:76:f8:
e3:f2:91:c8:ac:5b:0c:13:70:3d:0a:98:95:a5:f6:
71:b4:ca:e1:ca:26:ea:3e:45:18:7f:48:22:7c:c6:
bc:98:26:da:80:b4:03:e3:d6:28:eb:78:ea:0d:f0:
f5:be:f1:fd:4b:51:85:4a:e5:f3:33:b5:79:87:78:
4d:b3:6f:75:92:59:84:e4:0c:29:85:c8:25:c1:2d:
f4:46:54:3e:65:f7:fa:e3:63:c7:35:a7:2a:e2:81:
20:2e:20:b5:a8:c6:02:2f:f7:0a:88:fd:db:42:e0:
7e:76:a7:50:b8:a1:7a:49:13:85:9f:42:b6:98:7b:
1f:6a:4d:23:e1:8b:c6:2b:57:ce:b2:43:af:b8:43:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:2B:4C:2F:5A:B6:EB:F0:3E:FC:B9:96:AA:BB:20:37:01:31:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8deba3e-d48c-36ca-9131-dec347bdbc9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.204.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:07:05:35:ef:c6:aa:ee:6d:74:74:75:b3:ee:a8:eb:22:d1:
5c:9c:0f:51:24:7c:95:95:34:c3:0b:62:29:54:b7:9d:26:70:
53:77:4e:5f:52:31:33:57:d6:54:0d:b6:ae:69:a6:6e:66:26:
00:80:fa:55:d5:5a:24:6a:6d:b8:ac:95:6e:01:b2:00:c0:fe:
e9:38:05:e2:c1:17:dc:b2:3e:eb:43:46:cc:2f:89:1d:92:bc:
90:35:b4:bc:0b:3d:a8:49:13:09:7b:32:74:00:de:c7:11:da:
85:fb:8d:98:50:56:14:4a:d8:ab:6b:7c:e2:ed:03:6d:3a:7e:
86:90:a0:7f:60:71:b5:39:f4:a5:45:3c:c8:04:26:ec:25:5a:
0e:97:8a:67:1f:64:33:c4:3b:b2:38:ad:8c:f2:82:ac:5b:53:
83:06:1c:56:21:82:7b:54:a6:9f:8f:95:ac:5b:4e:94:c6:f4:
b0:52:c5:fc:06:08:49:1b:d0:b7:a1:6e:e7:6d:ff:f6:8b:ab:
c2:bb:16:65:dd:0d:69:b7:75:1c:30:f7:d8:00:b7:93:bf:ad:
fc:34:30:0d:c2:7d:16:43:0a:18:6c:64:da:e7:41:69:37:54:
a8:87:d5:d0:52:cc:53:62:94:61:52:22:e2:28:2f:8e:9f:cc:
35:5c:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:03 2025 by rpki-client